Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3138203d3e20313336323030.roa
File:                     3132342e3137332e302e302f31382d3138203d3e20313336323030.roa (raw, json)
Hash identifier:          U42BUj1sKTw/HTeKVXcCcf7Pe+ENathI33gIFYmKSmg=
Subject key identifier:   CC:57:EF:E3:B8:B6:81:E7:3E:8B:E9:D8:24:29:CB:F5:60:EA:79:E3
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       1D70CACD7B4A580AC25359F0AE0AECB7E84B4B37
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3138203d3e20313336323030.roa
Signing time:             Tue 14 Apr 2026 03:32:11 +0000
ROA not before:           Tue 14 Apr 2026 03:27:11 +0000
ROA not after:            Tue 13 Apr 2027 03:32:11 +0000
asID:                     136200
IP address blocks:        124.173.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 08:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:70:ca:cd:7b:4a:58:0a:c2:53:59:f0:ae:0a:ec:b7:e8:4b:4b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Apr 14 03:27:11 2026 GMT
            Not After : Apr 13 03:32:11 2027 GMT
        Subject: CN=CC57EFE3B8B681E73E8BE9D82429CBF560EA79E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:e4:22:83:12:4e:69:43:b9:fd:a3:03:fc:
                    24:58:f1:e3:63:bd:75:59:f2:19:f4:fe:35:60:ad:
                    e1:a6:05:44:cb:5f:8d:d9:8e:4a:03:1a:aa:59:2a:
                    00:b4:2d:ed:3c:b3:67:d6:8a:5b:37:d3:52:bd:2e:
                    4c:08:18:84:e1:1b:e7:fe:a2:75:1d:a1:7d:8f:1f:
                    e4:75:50:e6:bb:d1:c5:b7:18:05:40:70:00:df:e1:
                    17:95:80:d9:77:69:2d:c2:49:c1:8f:c9:f3:f4:5c:
                    6e:1c:d3:dc:8e:32:0a:11:7d:56:15:49:a3:ac:7c:
                    c6:e7:6b:dd:10:34:3a:d7:a1:2e:65:11:d4:81:cf:
                    5c:70:4d:23:a3:c4:79:92:c1:a1:30:3b:18:7e:26:
                    18:cd:e3:7b:59:5a:28:41:0d:bc:e2:70:1a:62:2f:
                    40:e3:4c:1a:ff:8d:9b:2e:6d:54:02:fa:94:e7:5a:
                    4e:be:0e:8d:a2:af:cb:a7:73:62:f8:56:33:ae:53:
                    40:d1:64:45:18:d3:10:dc:b2:73:bf:e4:32:b9:76:
                    8e:4d:e4:5d:89:2f:34:36:5d:95:d0:c4:59:2d:43:
                    50:41:c0:fb:b9:ee:36:51:57:87:a1:33:f3:ef:63:
                    18:0c:33:f1:17:cf:ce:3d:21:f5:9f:67:d4:f0:f9:
                    18:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:57:EF:E3:B8:B6:81:E7:3E:8B:E9:D8:24:29:CB:F5:60:EA:79:E3
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3138203d3e20313336323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.173.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         50:63:45:fb:1b:99:85:0e:f7:f4:01:2c:2f:a1:99:1f:28:e5:
         63:95:4c:db:02:62:7a:05:15:6b:a4:c1:cb:e3:c2:aa:a5:5f:
         3b:25:04:29:b3:a5:83:a9:83:46:41:98:a4:c2:98:21:c1:63:
         15:6f:f3:59:5e:12:86:41:f7:df:44:05:81:49:b8:e2:2a:6b:
         1f:7b:6e:f2:7f:f3:c5:25:d9:c1:a8:4f:86:8d:67:48:aa:d8:
         63:09:3c:f1:45:86:2b:91:28:34:23:ea:d8:aa:65:91:22:1d:
         6e:04:01:21:3a:c6:94:30:95:82:4f:4d:46:0f:f6:3b:ca:f9:
         f4:54:e2:f9:98:cc:19:bb:9c:ae:08:2b:44:14:ac:15:64:ec:
         81:f5:c5:03:e5:01:bf:a1:8f:b1:e3:fd:37:9b:d4:cf:9b:29:
         02:bd:4d:ab:4b:e9:47:c8:47:fb:8a:94:bb:10:7d:c0:99:9d:
         24:95:9e:0d:1f:4b:97:c8:a8:a8:a8:1d:a6:be:48:07:fb:7d:
         fb:75:01:51:f1:2c:3b:16:86:10:ce:aa:41:90:bc:8f:6f:e3:
         0f:1f:5c:e6:c5:c6:a5:8e:5d:a1:34:9f:1e:76:6a:fd:6c:d7:
         f6:cf:00:a6:93:0a:47:91:5f:a8:a5:d0:62:30:19:6f:c5:85:
         02:6c:d8:9a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUHXDKzXtKWArCU1nwrgrst+hLSzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2
QkY0MjQzRDAeFw0yNjA0MTQwMzI3MTFaFw0yNzA0MTMwMzMyMTFaMDMxMTAvBgNV
BAMTKENDNTdFRkUzQjhCNjgxRTczRThCRTlEODI0MjlDQkY1NjBFQTc5RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq+uQigxJOaUO5/aMD/CRY8eNj
vXVZ8hn0/jVgreGmBUTLX43ZjkoDGqpZKgC0Le08s2fWils301K9LkwIGIThG+f+
onUdoX2PH+R1UOa70cW3GAVAcADf4ReVgNl3aS3CScGPyfP0XG4c09yOMgoRfVYV
SaOsfMbna90QNDrXoS5lEdSBz1xwTSOjxHmSwaEwOxh+JhjN43tZWihBDbzicBpi
L0DjTBr/jZsubVQC+pTnWk6+Do2ir8unc2L4VjOuU0DRZEUY0xDcsnO/5DK5do5N
5F2JLzQ2XZXQxFktQ1BBwPu57jZRV4ehM/PvYxgMM/EXz849IfWfZ9Tw+RhpAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUzFfv47i2gec+i+nYJCnL9WDqeeMwHwYDVR0j
BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD
QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0NzgxMjg2Ny8wLzMxMzIzNDJlMzEz
NzMzMmUzMDJlMzAyZjMxMzgyZDMxMzgyMDNkM2UyMDMxMzMzNjMyMzAzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBnytADANBgkqhkiG9w0BAQsFAAOCAQEAUGNF+xuZhQ739AEsL6GZHyjl
Y5VM2wJiegUVa6TBy+PCqqVfOyUEKbOlg6mDRkGYpMKYIcFjFW/zWV4ShkH330QF
gUm44iprH3tu8n/zxSXZwahPho1nSKrYYwk88UWGK5EoNCPq2KplkSIdbgQBITrG
lDCVgk9NRg/2O8r59FTi+ZjMGbucrggrRBSsFWTsgfXFA+UBv6GPseP9N5vUz5sp
Ar1Nq0vpR8hH+4qUuxB9wJmdJJWeDR9Ll8ioqKgdpr5IB/t9+3UBUfEsOxaGEM6q
QZC8j2/jDx9c5sXGpY5doTSfHnZq/WzX9s8AppMKR5FfqKXQYjAZb8WFAmzYmg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:34 2026 by rpki-client